JAVA后端生成Token（令牌），用于校验客户端

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

**

 * 生成Token的工具类：

 */

package red.hearing.eval.modules.token;

import java.security.MessageDigest;

import java.security.NoSuchAlgorithmException;

import java.util.Random;

import sun.misc.BASE64Encoder;

/**

 * 生成Token的工具类

 * @author zhous

 * @since 2018-2-23 13:59:27

 *

 */

public class TokenProccessor {

     private TokenProccessor(){};

     private static final TokenProccessor instance = new TokenProccessor();

    public static TokenProccessor getInstance() {

        return instance;

    }

    /**

     * 生成Token

     * @return

     */

    public String makeToken() {

        String token = (System.currentTimeMillis() + new Random().nextInt(999999999)) + "";

         try {

            MessageDigest md = MessageDigest.getInstance("md5");

            byte md5[] =  md.digest(token.getBytes());

            BASE64Encoder encoder = new BASE64Encoder();

            return encoder.encode(md5);

        } catch (NoSuchAlgorithmException e) {

            // TODO Auto-generated catch block

            e.printStackTrace();

        }

         return null;

    }

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

/**

 *

 */

package red.hearing.eval.modules.token;

import javax.servlet.http.HttpServletRequest;

import org.apache.commons.lang3.StringUtils;

/**

 * Token的工具类

 * @author zhous

 * @since 2018-2-23 14:01:41

 *

 */

public class TokenTools {

    /**

     * 生成token放入session

     * @param request

     * @param tokenServerkey

     */

    public static void createToken(HttpServletRequest request,String tokenServerkey){

        String token = TokenProccessor.getInstance().makeToken();

        request.getSession().setAttribute(tokenServerkey, token);

    }

    /**

     * 移除token

     * @param request

     * @param tokenServerkey

     */

    public static void removeToken(HttpServletRequest request,String tokenServerkey){

        request.getSession().removeAttribute(tokenServerkey);

    }

    /**

     * 判断请求参数中的token是否和session中一致

     * @param request

     * @param tokenClientkey

     * @param tokenServerkey

     * @return

     */

    public static boolean judgeTokenIsEqual(HttpServletRequest request,String tokenClientkey,String tokenServerkey){

        String token_client = request.getParameter(tokenClientkey);

        if(StringUtils.isEmpty(token_client)){

            return false;

        }

        String token_server = (String) request.getSession().getAttribute(tokenServerkey);

        if(StringUtils.isEmpty(token_server)){

            return false;

        }

        if(!token_server.equals(token_client)){

            return false;

        }

        return true;

    }

}